A living document tracking each identified risk, its status, and response plan. The risk register keeps risks on the radar, so nothing sneaks up on you.